I would like to know what is the difference of *SECADM ADN *SECOFR of user class (*USRCLS) when I add a user p...
When creating or changing a user profile, the value specified for the User class parameter defaults the special authorities the profile is created with. The Special authority can be overridden to name specific special authorities, but it normally defaults to the settings associated with the user class.
The *SECOFR user class defaults to give the user all special authorities.
The *SECADM user class defaults to give the user *SECADM special authority.
The user class parameter is also used to default the menu options users see on IBM menus. Other than these two items, the user class is never used. Many people think it is used during the OS/400 security checking algorithm, but it is not.
Dig Deeper on iSeries system and application security
Related Q&A from Carol Woodbury
Before changing password levels and upgrading operating systems on the AS/400, ensure the clients connecting to the NetServer do not need the old ... Continue Reading
When error messages arise concerning attempts to use a permanent system object without authority, find the source of the issue by looking for an AF ... Continue Reading
The UPPWEI field corresponds to the password expiration interval field, and its values "0" and "-1" represent the *SYSVAL and *NOXMAX commands. Continue Reading